RE: [RFC] MPI module

2009-02-06 Thread Loc Ho
Hi, Sorry for the late response... See inline... -Loc -Original Message- From: Pierre Habouzit [mailto:madco...@debian.org] Sent: Saturday, January 31, 2009 2:35 PM To: Loc Ho Cc: Herbert Xu; linux-crypto@vger.kernel.org Subject: Re: [RFC] MPI module On Fri, Jan 30, 2009 at 06:54:16PM

Re: [RFC] MPI module

2009-01-31 Thread Pierre Habouzit
On Fri, Jan 30, 2009 at 06:54:16PM +, Loc Ho wrote: > Hi, > > I would like to add that you can even handle the TLS/DTLS/SSL packet > formation in the kernel as well if you provide an algorithms that does > just that. Right now, most user just use the kernel for the hashing > and cipher parts.

RE: [RFC] MPI module

2009-01-30 Thread Loc Ho
, January 30, 2009 4:41 AM To: Pierre Habouzit Cc: linux-crypto@vger.kernel.org Subject: Re: [RFC] MPI module Pierre Habouzit wrote: > > So let me rephrase that to be sure we've understood each other. What you > suggest is to have an IKE-like daemon dealing with the keys and all the >

Re: [RFC] MPI module

2009-01-30 Thread Herbert Xu
Pierre Habouzit wrote: > > So let me rephrase that to be sure we've understood each other. What you > suggest is to have an IKE-like daemon dealing with the keys and all the > handshakes, and that the kernel would only deal with the symmetric > ciphers used on the data path. Is that right ? Eithe

Re: [RFC] MPI module

2009-01-30 Thread Pierre Habouzit
On Fri, Jan 30, 2009 at 03:25:06AM +, Herbert Xu wrote: > Pierre Habouzit wrote: > > > > My endgame is simple, I'd like to see an in-kernel SSL/TLS > > implementation in Linux happen. There are many reasons to want that, > > ranging from performance reasons (waking the userland each time you >

Re: [RFC] MPI module

2009-01-29 Thread Herbert Xu
Pierre Habouzit wrote: > > My endgame is simple, I'd like to see an in-kernel SSL/TLS > implementation in Linux happen. There are many reasons to want that, > ranging from performance reasons (waking the userland each time you > perform a handshake isn't particularly nice, and it's easy to make >